Access control: expose permissions to the frontend (#32954)

* Expose user permissions to the frontend

* Do not include empty scope

* Extend ContextSrv with hasPermission() method

* Add access control types

* Fix type error (make permissions optional)

* Fallback if access control disabled

* Move UserPermission to types

* Simplify hasPermission()

pkg/services/accesscontrol/accesscontrol.go

@@ -16,3 +16,22 @@ type AccessControl interface {
 	// Middleware checks if service disabled or not to switch to fallback authorization.
 	IsDisabled() bool
 }
+
+func BuildPermissionsMap(permissions []*Permission) map[string]map[string]string {
+	permissionsMap := make(map[string]map[string]string)
+	for _, p := range permissions {
+		if item, ok := permissionsMap[p.Action]; ok {
+			if _, ok := item[p.Scope]; !ok && p.Scope != "" {
+				permissionsMap[p.Action][p.Scope] = p.Scope
+			}
+		} else {
+			newItem := make(map[string]string)
+			if p.Scope != "" {
+				newItem[p.Scope] = p.Scope
+			}
+			permissionsMap[p.Action] = newItem
+		}
+	}
+
+	return permissionsMap
+}